npm malware: @lemili9804/mcp-weather-server — malicious package fully compromises installed machines (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-11-10
GitHub's malware advisory database published GHSA-qwfq-cw9x-55x4 on 2026-11-10 flagging the npm package @lemili9804/mcp-weather-server as embedded malicious code (CWE-506). Versions 1.0.3 and 1.0.6 are affected, with no patched versions available; the package has roughly 1,812 monthly downloads. GitHub's guidance states that any computer with the package installed or running should be considered fully compromised, meaning attackers may have obtained full control, including access to secrets and keys stored on the machine. Removal of the package alone is not guaranteed to remove all malicious software. No CVE is assigned; the advisory carries no EPSS score and no known source code repository exists for the package.
What to do
- Immediately rotate all secrets, API keys, tokens and credentials stored on any machine where the package was installed, using a clean, uncompromised computer
- Remove @lemili9804/mcp-weather-server from all projects and lockfiles
- Rebuild or wipe affected machines, as removal may not eliminate all malicious software
- Audit systems for signs of compromise and unexpected outbound connections
- Block the package in internal registries and dependency scanning
Sources
All live incidents on Threat Watch
